Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2014
April

CVEs published in April 2014

645 vulnerabilities, 61 critical, 3 exploited.

Known exploitedIn KEVPublic exploitFix available

cms tree page view project tree page viewCross-site scripting (XSS) vulnerability in the cms_tpv_admin_head function in functions.php in...CVE-2012-18344.3 MediumApril 7, 2014
openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 HighApril 7, 2014
lee howard hylafax\+Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP...CVE-2013-5680Public exploit6.8 MediumApril 6, 2014
restful web services project web servicesThe RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5...CVE-2013-19464.3 MediumApril 6, 2014
prosodyProsody before 0.9.4 does not properly restrict the processing of compressed XML elements, which...CVE-2014-2745Fix available7.8 HighApril 6, 2014
lightwitch metronome, prosody +1 moreplugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4...CVE-2014-2744Fix available7.8 HighApril 6, 2014
horde groupware, imp +1 moreCross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as...CVE-2012-6640Fix available4.3 MediumApril 5, 2014
horde groupware, kronolith h4 +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4...CVE-2012-55674.3 MediumApril 5, 2014
horde groupware, kronolith h4 +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4...CVE-2012-55664.3 MediumApril 5, 2014
horde groupware, imp +1 moreCross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program ...CVE-2012-55654.3 MediumApril 5, 2014
microsoft officeThe XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011,...CVE-2014-2730EPSS 11.4%5.0 MediumApril 5, 2014
hp icewall identity manager, icewall sso password reset option +1 moreUnspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO...CVE-2014-26004.0 MediumApril 5, 2014
cisco unity connectionDirectory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote...CVE-2014-21454.0 MediumApril 5, 2014
cisco ios xrCisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to...CVE-2014-21446.1 MediumApril 5, 2014
ibm optim workload replayCross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows...CVE-2014-08274.3 MediumApril 5, 2014
huawei echo life, echo life hg8247 firmware +1 moreCross-site scripting (XSS) vulnerability in the web interface on Huawei Echo Life HG8247 routers...CVE-2014-03374.3 MediumApril 5, 2014
libzip MageiaUpdated libzip package fixes crashes using php-zipMGASA-2014-0164Fix availableNo scoreApril 4, 2014
ca erwin web portalMultiple directory traversal vulnerabilities in CA ERwin Web Portal 9.5 allow remote attackers to...CVE-2014-22107.5 HighApril 4, 2014
cisco ios, ios xe +1 moreThe IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to...CVE-2014-21435.0 MediumApril 4, 2014
cisco emergency responderMultiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow...CVE-2014-21174.3 MediumApril 4, 2014
cisco emergency responderCisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and...CVE-2014-21164.3 MediumApril 4, 2014
cisco emergency responderMultiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco...CVE-2014-21156.8 MediumApril 4, 2014
cisco emergency responderCross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and...CVE-2014-21144.3 MediumApril 4, 2014
schneider electric opc factory server (ofs), schneider-electric opc factory server tlxcdlfofs, opc factory server tlxcdltofs +3 more +5 moreSchneider Electric OPC Factory Server Buffer OverflowCVE-2014-07895.0 April 4, 2014
emc rsa adaptive authentication on-premiseCross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x...CVE-2014-06384.3 MediumApril 4, 2014
emc rsa adaptive authentication on-premiseCross-site scripting (XSS) vulnerability in the back-office case-management application in RSA...CVE-2014-06374.3 MediumApril 4, 2014
crowbar barclamp, novell suse cloud +1 moreBarclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not...CVE-2014-05927.5 HighApril 4, 2014
coreftp core ftpStack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to...CVE-2013-39309.3 HighApril 4, 2014
roberta bramski uploaderMultiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1...CVE-2013-2287Public exploit4.3 MediumApril 4, 2014
samsung kiesBuffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies...CVE-2012-6429Public exploitEPSS 15.8%10.0 HighApril 4, 2014
theforeman foremanMultiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute...CVE-2012-56487.5 HighApril 4, 2014
zingiri forumsDirectory traversal vulnerability in the zing_forum_output function in forum.php in the Zingiri...CVE-2012-49205.0 MediumApril 4, 2014
python pillow, pythonware python imaging library +1 morePillow Temporary file name leakageCVE-2014-1933Fix available2.1 LowApril 3, 2014
python pillow, pythonware python imaging library +1 morePIL and Pillow Vulnerable to Symlink Attack on TmpfilesCVE-2014-1932Fix available4.4 MediumApril 3, 2014
xclonerCross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress...CVE-2014-2340Public exploit6.8 MediumApril 3, 2014
redhat jboss enterprise application platformRed Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager ...CVE-2014-00935.8 MediumApril 3, 2014
zend framework, zendopenid +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-2685Fix available7.5 HighApril 3, 2014
zend framework, zendopenid +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-2684Fix available6.4 MediumApril 3, 2014
zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-2683Fix available5.0 MediumApril 3, 2014
zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-2682Fix available6.8 MediumApril 3, 2014
zend framework, zendopenid, zendrest +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-2681Fix available6.4 MediumApril 3, 2014
b2evolutionCross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7...CVE-2013-73526.8 MediumApril 2, 2014
cartpauj mingle-forumMultiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34...CVE-2013-07357.5 HighApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13136.8 MediumApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13126.8 MediumApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13116.8 MediumApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13106.8 MediumApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13096.8 MediumApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13086.8 MediumApril 2, 2014
apple safariWebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to...CVE-2014-13076.8 MediumApril 2, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open